2.2 Verify and Validate Design (e.g., Functional Acceptance Testing, Regression) ISSAP Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security architect is validating a new zero trust architecture. The threat model identified a gap: the design does not include continuous monitoring of user behavior. The architect is considering adding a user and entity behavior analytics (UEBA) solution or implementing periodic access reviews. The organization has a compliance requirement to detect anomalous behavior within 24 hours. The UEBA solution is expensive and requires significant integration effort. What should the architect do?

   • AImplement periodic access reviews as a compensating control.
   • BConduct a tabletop exercise to discuss anomalous behavior detection.
   • CAccept the risk because the zero trust architecture is already strong.
   • DImplement the UEBA solution to meet the compliance requirement for continuous monitoring.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A security architect is performing gap identification on a new system design. Which activity is most directly associated with this process?

   • ACalculating the return on security investment
   • BMapping security requirements to design components
   • CRunning penetration tests on the production system
   • DReviewing the organization's security policies
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security architect is validating a new data loss prevention (DLP) solution. The threat model identified a gap: the design does not cover data exfiltration via email. The architect is considering two mitigations: adding email inspection to the DLP solution or implementing a separate email security gateway. The organization has a limited budget and wants to minimize the number of vendors. Which mitigation should the architect choose?

   • AAccept the risk because email exfiltration is unlikely.
   • BAdd email inspection to the existing DLP solution.
   • CConduct a tabletop exercise to discuss email exfiltration scenarios.
   • DImplement a separate email security gateway.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A development team is validating a new microservices-based payment system. The threat model identified a risk of using outdated third-party libraries with known vulnerabilities. The security architect must choose a code review methodology to validate that the implementation does not introduce this risk. Which methodology is most appropriate?

   • ADynamic analysis to test the running application for exploitable vulnerabilities.
   • BStatic analysis to scan the codebase for common coding errors and security flaws.
   • CManual code review to inspect the integration of third-party libraries.
   • DSource composition analysis to identify known vulnerabilities in open-source components.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security architect is validating a new IoT device management platform. The threat model identified a high-impact threat of unauthorized device takeover via a weak authentication mechanism. The design includes a proposed mitigation of certificate-based authentication. However, the threat model also shows that the certificate provisioning process is vulnerable to interception. The architect must decide how to validate the design. Which approach is most appropriate?

   • AEvaluate alternative mitigations for the provisioning process, such as out-of-band verification or hardware security modules, and validate their effectiveness.
   • BProceed with the design and rely on certificate-based authentication to protect against device takeover.
   • CAccept the certificate provisioning risk because the authentication mitigation is strong.
   • DConduct a regression test on the authentication module to ensure it still works as expected.
   Reveal Solution Discussion Select an answer first